Forum Discussion
Teams/M365 group members not getting SharePoint Team Site Permissions
I created a M365 user group with a Team site. The associated SharePoint team site has the expected permission groups. The permission groups contain the M365 group owners and members.
For Owners of the M365 group, permissions seem to flow correctly to SharePoint. For members of the M365 group, permissions are not working in SharePoint. In my screen shot below, the marked user is added directly to the SharePoint permissions group. He is also a member of the M365 group listed below his name. Adding him directly was the only way to get the Edit permissions allowed by the SharePoint permissions group.
I understood that When you add owners or members to the Microsoft 365 group, they're given access to the SharePoint site through the combination of the M365 group and the SharePoint permissions group.
I have not broken any inheritance on this site. I have looked at the M365 group membership in Teams and in the Admin center, the user shows up listed as a member. This effects multiple M365 group members who have been in members group for weeks so I do not believe it is a replication issue across the services.
Can anyone please advise as to why members of the M365 group are not getting SharePoint permissions from the group membership?
- I did, Christian, and will provide the astonishing explanation in case Christy did not herself get in contact with Support.
Sooo ...
Everything works exactly as advertised except for one absolutely crucial detail, mentioned absolutely nowhere I have come across:
Check Permission WILL NOT resolve the permissions of a group member thru the M365 group until THEY FIRST ACCESS that site. When an actual M365 group member attempted to acces the site, (much to our surprise) it went without a hiccup, just as permitted. And from that moment on that (and only that) user would finally resolve in Check Permissions. His group peers would continue to show as "No permissions". Until their first access.
From the perspective of the uninitiated SP admin, this is pretty insane.
4 Replies
- ecovonreinIron ContributorExcellent write-up. Tore my hair out for hours last night over the exact same issue. Not one answer in 4 months? Wow - popular forum this is (not). Did you have any joy via other support channels?
ecovonrein Imagine the amount of questions being added everyday to all the different community hubs, so nothing odd that some posts end up being unanswered. Remember this is community forum, no Microsoft support staff, ticket numbers or similar in here. Just ordinary folks trying to help each other.
This is how it works (should work) Sharing & permissions in the SharePoint modern experience - SharePoint in Microsoft 365 | Microsoft Docs
If not, I recommend opening a proper support ticket with Microsoft from M365 admin center (can be done with administrators assistance if you're not an admin).
- ecovonreinIron ContributorI did, Christian, and will provide the astonishing explanation in case Christy did not herself get in contact with Support.
Sooo ...
Everything works exactly as advertised except for one absolutely crucial detail, mentioned absolutely nowhere I have come across:
Check Permission WILL NOT resolve the permissions of a group member thru the M365 group until THEY FIRST ACCESS that site. When an actual M365 group member attempted to acces the site, (much to our surprise) it went without a hiccup, just as permitted. And from that moment on that (and only that) user would finally resolve in Check Permissions. His group peers would continue to show as "No permissions". Until their first access.
From the perspective of the uninitiated SP admin, this is pretty insane.